350-701 Exam Details
-
Exam Code
:350-701 -
Exam Name
:Implementing and Operating Cisco Security Core Technologies (SCOR) -
Certification
:CCIE Security -
Vendor
:Cisco -
Total Questions
:784 Q&As -
Last Updated
:May 30, 2026
Cisco 350-701 Online Questions & Answers
-
Question 321:
What is a capability of Cisco ASA Netflow?
A. It filters NSEL events based on traffic
B. It generates NSEL events even if the MPF is not configured
C. It logs all event types only to the same collector
D. It sends NetFlow data records from active and standby ASAs in an active standby failover pair -
Question 322:
When web policies are configured in Cisco Umbrella, what provides the ability to ensure that domains are blocked when they host malware, command and control, phishing, and more threats?
A. Application Control
B. Security Category Blocking
C. Content Category Blocking
D. File Analysis -
Question 323:
Refer to the exhibit.
How does Cisco Umbrella manage traffic that is directed toward risky domains?
A. Traffic is proximed through the intelligent proxy.
B. Traffic is managed by the security settings and blocked.
C. Traffic is managed by the application settings, unhandled and allowed.
D. Traffic is allowed but logged. -
Question 324:
In an IaaS cloud services model, which security function is the provider responsible for managing?
A. Internet proxy
B. firewalling virtual machines
C. CASB
D. hypervisor OS hardening -
Question 325:
When a site-to-site VPN is configured in Cisco FMC, which topology is supported when crypto ACLs are used instead of protected networks to define interesting traffic?
A. hub-and-spoke
B. full mesh
C. DMVPN
D. point-to-point -
Question 326:
An engineer has been tasked with configuring a Cisco FTD to analyze protocol fields and detect anomalies in the traffic from industrial systems. What must be done to meet these requirements?
A. Implement pre-filter policies for the CIP preprocessor
B. Enable traffic analysis in the Cisco FTD
C. Configure intrusion rules for the DNP3 preprocessor
D. Modify the access control policy to trust the industrial traffic -
Question 327:
An administrator is configuring N I P on Cisco ASA via ASDM and needs to ensure that rogue NTP servers cannot insert themselves as the authoritative time source Which two steps must be taken to accomplish this task? (Choose two)
A. Specify the NTP version
B. Configure the NTP stratum
C. Set the authentication key
D. Choose the interface for syncing to the NTP server
E. Set the NTP DNS hostname -
Question 328:
Using Cisco Firepower's Security Intelligence policies, upon which two criteria is Firepower block based? (Choose two)
A. URLs
B. protocol IDs
C. IP addresses
D. MAC addresses
E. port numbers -
Question 329:
What must be enabled to secure SaaS-based applications?
A. modular policy framework
B. two-factor authentication
C. application security gateway
D. end-to-end encryption -
Question 330:
Which Cisco DNA Center RESTful PNP API adds and claims a device into a workflow?
A. api/v1/fie/config
B. api/v1/onboarding/pnp-device/import
C. api/v1/onboarding/pnp-device
D. api/v1/onboarding/workflow
Tips on How to Prepare for the Exams
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Cisco exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 350-701 exam preparations and Cisco certification application, do not hesitate to visit our Vcedump.com to find your solutions here.